Every CVE Search/ Get API key

CVE-2007-3847

The date handling code in modules/proxy/proxy_util.c (mod_proxy) in Apache 2.3.0, when using a...

5.0 MediumFix available

CVE-2007-3847 is a medium vulnerability (CVSS 5.0) in Apache Http Server, published August 23, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 12.9%, the 96th percentile. Fixed in apache2 2.2.6-1.

The date handling code in modules/proxy/proxy_util.c (mod_proxy) in Apache 2.3.0, when using a threaded MPM, allows remote origin servers to cause a denial of service (caching forward proxy process crash) via crafted date headers that trigger a buffer over-read.

Exploit likelihood

12.9%Up 2.0 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

The date handling code in modules/proxy/proxy_util.c (mod_proxy) in Apache 2.3.0, when using a threaded MPM, allows remote origin servers to cause a denial of service (caching forward proxy process crash) via crafted date headers that trigger a buffer over-read.

Record
CVE-2007-3847
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-125
Updated
2026-11-02
CVE List No score

The date handling code in modules/proxy/proxy_util.c (mod_proxy) in Apache 2.3.0, when using a threaded MPM, allows remote origin servers to cause a denial of service (caching forward proxy process crash) via crafted date headers that trigger a buffer over-read.

Record
CVE-2007-3847
Updated
2026-11-02
EUVDEUVD-2007-3831 No score

The date handling code in modules/proxy/proxy_util.c (mod_proxy) in Apache 2.3.0, when using a threaded MPM, allows remote origin servers to cause a denial of service (caching forward proxy process crash) via crafted date headers that trigger a buffer over-read.

Record
EUVD-2007-3831
Updated
2026-11-03
GitHub AdvisoriesGHSA-v7h4-gr67-jxvj No score

The date handling code in modules/proxy/proxy_util.c (mod_proxy) in Apache 2.3.0, when using a...

The date handling code in modules/proxy/proxy_util.c (mod_proxy) in Apache 2.3.0, when using a threaded MPM, allows remote origin servers to cause a denial of service (caching forward proxy process crash) via crafted date headers that trigger a buffer over-read.

Record
GHSA-v7h4-gr67-jxvj
Weakness
CWE-125
Updated
2026-11-02
OSV No score

The date handling code in modules/proxy/proxy_util.c (mod_proxy) in Apache 2.3.0, when using a threaded MPM, allows remote origin servers to cause a denial of service (caching forward proxy process crash) via crafted date headers that trigger a buffer over-read.

Record
CVE-2007-3847
Updated
2026-11-02
OSVDEBIAN-CVE-2007-3847 No score

The date handling code in modules/proxy/proxy_util.c (mod_proxy) in Apache 2.3.0, when using a threaded MPM, allows remote origin servers to cause a denial of service (caching forward proxy process crash) via crafted date headers that trigger a buffer over-read.

Record
DEBIAN-CVE-2007-3847
Updated
2026-11-02
OSVopenSUSE-SU-2024:10623-1 No score

apache2-2.4.49-1.1 on GA media

These are all security issues fixed in the apache2-2.4.49-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10623-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
apache2
Debian:12
 before 2.2.6-1
2.2.6-1
apache2
Debian:13
 before 2.2.6-1
2.2.6-1
apache2
Debian:14
 before 2.2.6-1
2.2.6-1
httpd
Red Hat:enterprise_linux:5::client_workstation
 before 0:2.2.3-11.el5
0:2.2.3-11.el5
httpd-debuginfo
Red Hat:enterprise_linux:5::client_workstation
 before 0:2.2.3-11.el5
0:2.2.3-11.el5
httpd-devel
Red Hat:enterprise_linux:5::client_workstation
 before 0:2.2.3-11.el5
0:2.2.3-11.el5
httpd-manual
Red Hat:enterprise_linux:5::client_workstation
 before 0:2.2.3-11.el5
0:2.2.3-11.el5
httpd
Red Hat:enterprise_linux:5::client
 before 0:2.2.3-11.el5
0:2.2.3-11.el5
httpd-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:2.2.3-11.el5
0:2.2.3-11.el5
mod_ssl
Red Hat:enterprise_linux:5::client
 before 1:2.2.3-11.el5
1:2.2.3-11.el5
Show 90 moreShow less
Affected packages
PackageAffectedFixed
httpd
Red Hat:enterprise_linux:5::server
 before 0:2.2.3-11.el5
0:2.2.3-11.el5
httpd-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:2.2.3-11.el5
0:2.2.3-11.el5
httpd-devel
Red Hat:enterprise_linux:5::server
 before 0:2.2.3-11.el5
0:2.2.3-11.el5
httpd-manual
Red Hat:enterprise_linux:5::server
 before 0:2.2.3-11.el5
0:2.2.3-11.el5
mod_ssl
Red Hat:enterprise_linux:5::server
 before 1:2.2.3-11.el5
1:2.2.3-11.el5
httpd
Red Hat:enterprise_linux:4::as
 before 0:2.0.52-38.ent
0:2.0.52-38.ent
httpd-debuginfo
Red Hat:enterprise_linux:4::as
 before 0:2.0.52-38.ent
0:2.0.52-38.ent
httpd-devel
Red Hat:enterprise_linux:4::as
 before 0:2.0.52-38.ent
0:2.0.52-38.ent
httpd-manual
Red Hat:enterprise_linux:4::as
 before 0:2.0.52-38.ent
0:2.0.52-38.ent
httpd-suexec
Red Hat:enterprise_linux:4::as
 before 0:2.0.52-38.ent
0:2.0.52-38.ent
mod_ssl
Red Hat:enterprise_linux:4::as
 before 1:2.0.52-38.ent
1:2.0.52-38.ent
httpd
Red Hat:enterprise_linux:4::desktop
 before 0:2.0.52-38.ent
0:2.0.52-38.ent
httpd-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 0:2.0.52-38.ent
0:2.0.52-38.ent
httpd-devel
Red Hat:enterprise_linux:4::desktop
 before 0:2.0.52-38.ent
0:2.0.52-38.ent
httpd-manual
Red Hat:enterprise_linux:4::desktop
 before 0:2.0.52-38.ent
0:2.0.52-38.ent
httpd-suexec
Red Hat:enterprise_linux:4::desktop
 before 0:2.0.52-38.ent
0:2.0.52-38.ent
mod_ssl
Red Hat:enterprise_linux:4::desktop
 before 1:2.0.52-38.ent
1:2.0.52-38.ent
httpd
Red Hat:enterprise_linux:4::es
 before 0:2.0.52-38.ent
0:2.0.52-38.ent
httpd-debuginfo
Red Hat:enterprise_linux:4::es
 before 0:2.0.52-38.ent
0:2.0.52-38.ent
httpd-devel
Red Hat:enterprise_linux:4::es
 before 0:2.0.52-38.ent
0:2.0.52-38.ent
httpd-manual
Red Hat:enterprise_linux:4::es
 before 0:2.0.52-38.ent
0:2.0.52-38.ent
httpd-suexec
Red Hat:enterprise_linux:4::es
 before 0:2.0.52-38.ent
0:2.0.52-38.ent
mod_ssl
Red Hat:enterprise_linux:4::es
 before 1:2.0.52-38.ent
1:2.0.52-38.ent
httpd
Red Hat:enterprise_linux:4::ws
 before 0:2.0.52-38.ent
0:2.0.52-38.ent
httpd-debuginfo
Red Hat:enterprise_linux:4::ws
 before 0:2.0.52-38.ent
0:2.0.52-38.ent
httpd-devel
Red Hat:enterprise_linux:4::ws
 before 0:2.0.52-38.ent
0:2.0.52-38.ent
httpd-manual
Red Hat:enterprise_linux:4::ws
 before 0:2.0.52-38.ent
0:2.0.52-38.ent
httpd-suexec
Red Hat:enterprise_linux:4::ws
 before 0:2.0.52-38.ent
0:2.0.52-38.ent
mod_ssl
Red Hat:enterprise_linux:4::ws
 before 1:2.0.52-38.ent
1:2.0.52-38.ent
httpd
Red Hat:rhel_application_stack:1
 before 0:2.0.59-1.el4s1.8
0:2.0.59-1.el4s1.8
httpd-debuginfo
Red Hat:rhel_application_stack:1
 before 0:2.0.59-1.el4s1.8
0:2.0.59-1.el4s1.8
httpd-devel
Red Hat:rhel_application_stack:1
 before 0:2.0.59-1.el4s1.8
0:2.0.59-1.el4s1.8
httpd-manual
Red Hat:rhel_application_stack:1
 before 0:2.0.59-1.el4s1.8
0:2.0.59-1.el4s1.8
mod_ssl
Red Hat:rhel_application_stack:1
 before 1:2.0.59-1.el4s1.8
1:2.0.59-1.el4s1.8
httpd
Red Hat:enterprise_linux:3::as
 before 0:2.0.46-70.ent
0:2.0.46-70.ent
httpd-debuginfo
Red Hat:enterprise_linux:3::as
 before 0:2.0.46-70.ent
0:2.0.46-70.ent
httpd-devel
Red Hat:enterprise_linux:3::as
 before 0:2.0.46-70.ent
0:2.0.46-70.ent
mod_ssl
Red Hat:enterprise_linux:3::as
 before 1:2.0.46-70.ent
1:2.0.46-70.ent
httpd
Red Hat:enterprise_linux:3::desktop
 before 0:2.0.46-70.ent
0:2.0.46-70.ent
httpd-debuginfo
Red Hat:enterprise_linux:3::desktop
 before 0:2.0.46-70.ent
0:2.0.46-70.ent
httpd-devel
Red Hat:enterprise_linux:3::desktop
 before 0:2.0.46-70.ent
0:2.0.46-70.ent
mod_ssl
Red Hat:enterprise_linux:3::desktop
 before 1:2.0.46-70.ent
1:2.0.46-70.ent
httpd
Red Hat:enterprise_linux:3::es
 before 0:2.0.46-70.ent
0:2.0.46-70.ent
httpd-debuginfo
Red Hat:enterprise_linux:3::es
 before 0:2.0.46-70.ent
0:2.0.46-70.ent
httpd-devel
Red Hat:enterprise_linux:3::es
 before 0:2.0.46-70.ent
0:2.0.46-70.ent
mod_ssl
Red Hat:enterprise_linux:3::es
 before 1:2.0.46-70.ent
1:2.0.46-70.ent
httpd
Red Hat:enterprise_linux:3::ws
 before 0:2.0.46-70.ent
0:2.0.46-70.ent
httpd-debuginfo
Red Hat:enterprise_linux:3::ws
 before 0:2.0.46-70.ent
0:2.0.46-70.ent
httpd-devel
Red Hat:enterprise_linux:3::ws
 before 0:2.0.46-70.ent
0:2.0.46-70.ent
mod_ssl
Red Hat:enterprise_linux:3::ws
 before 1:2.0.46-70.ent
1:2.0.46-70.ent
ant
Red Hat:certificate_system:7.3
 before 0:1.6.5-1jpp_1rh
0:1.6.5-1jpp_1rh
avalon-logkit
Red Hat:certificate_system:7.3
 before 0:1.2-2jpp_4rh
0:1.2-2jpp_4rh
axis
Red Hat:certificate_system:7.3
 before 0:1.2.1-1jpp_3rh
0:1.2.1-1jpp_3rh
classpathx-jaf
Red Hat:certificate_system:7.3
 before 0:1.0-2jpp_6rh
0:1.0-2jpp_6rh
classpathx-mail
Red Hat:certificate_system:7.3
 before 0:1.1.1-2jpp_8rh
0:1.1.1-2jpp_8rh
geronimo-ejb-2.1-api
Red Hat:certificate_system:7.3
 before 0:1.0-0.M4.1jpp_10rh
0:1.0-0.M4.1jpp_10rh
geronimo-j2ee-1.4-apis
Red Hat:certificate_system:7.3
 before 0:1.0-0.M4.1jpp_10rh
0:1.0-0.M4.1jpp_10rh
geronimo-j2ee-connector-1.5-api
Red Hat:certificate_system:7.3
 before 0:1.0-0.M4.1jpp_10rh
0:1.0-0.M4.1jpp_10rh
geronimo-j2ee-deployment-1.1-api
Red Hat:certificate_system:7.3
 before 0:1.0-0.M4.1jpp_10rh
0:1.0-0.M4.1jpp_10rh
geronimo-j2ee-management-1.0-api
Red Hat:certificate_system:7.3
 before 0:1.0-0.M4.1jpp_10rh
0:1.0-0.M4.1jpp_10rh
geronimo-jms-1.1-api
Red Hat:certificate_system:7.3
 before 0:1.0-0.M4.1jpp_10rh
0:1.0-0.M4.1jpp_10rh
geronimo-jsp-2.0-api
Red Hat:certificate_system:7.3
 before 0:1.0-0.M4.1jpp_10rh
0:1.0-0.M4.1jpp_10rh
geronimo-jta-1.0.1B-api
Red Hat:certificate_system:7.3
 before 0:1.0-0.M4.1jpp_10rh
0:1.0-0.M4.1jpp_10rh
geronimo-servlet-2.4-api
Red Hat:certificate_system:7.3
 before 0:1.0-0.M4.1jpp_10rh
0:1.0-0.M4.1jpp_10rh
geronimo-specs
Red Hat:certificate_system:7.3
 before 0:1.0-0.M4.1jpp_10rh
0:1.0-0.M4.1jpp_10rh
geronimo-specs-javadoc
Red Hat:certificate_system:7.3
 before 0:1.0-0.M4.1jpp_10rh
0:1.0-0.M4.1jpp_10rh
jakarta-commons-modeler
Red Hat:certificate_system:7.3
 before 0:2.0-3jpp_2rh
0:2.0-3jpp_2rh
log4j
Red Hat:certificate_system:7.3
 before 0:1.2.12-1jpp_1rh
0:1.2.12-1jpp_1rh
mx4j
Red Hat:certificate_system:7.3
 before 1:3.0.1-1jpp_4rh
1:3.0.1-1jpp_4rh
pcsc-lite
Red Hat:certificate_system:7.3
 before 0:1.3.3-3.el4
0:1.3.3-3.el4
pcsc-lite-debuginfo
Red Hat:certificate_system:7.3
 before 0:1.3.3-3.el4
0:1.3.3-3.el4
pcsc-lite-doc
Red Hat:certificate_system:7.3
 before 0:1.3.3-3.el4
0:1.3.3-3.el4
pcsc-lite-libs
Red Hat:certificate_system:7.3
 before 0:1.3.3-3.el4
0:1.3.3-3.el4
rhpki-ca
Red Hat:certificate_system:7.3
 before 0:7.3.0-20.el4
0:7.3.0-20.el4
rhpki-java-tools
Red Hat:certificate_system:7.3
 before 0:7.3.0-10.el4
0:7.3.0-10.el4
rhpki-kra
Red Hat:certificate_system:7.3
 before 0:7.3.0-14.el4
0:7.3.0-14.el4
rhpki-manage
Red Hat:certificate_system:7.3
 before 0:7.3.0-19.el4
0:7.3.0-19.el4
rhpki-native-tools
Red Hat:certificate_system:7.3
 before 0:7.3.0-6.el4
0:7.3.0-6.el4
rhpki-ocsp
Red Hat:certificate_system:7.3
 before 0:7.3.0-13.el4
0:7.3.0-13.el4
rhpki-tks
Red Hat:certificate_system:7.3
 before 0:7.3.0-13.el4
0:7.3.0-13.el4
tomcat5
Red Hat:certificate_system:7.3
 before 0:5.5.23-0jpp_4rh.16
0:5.5.23-0jpp_4rh.16
tomcat5-common-lib
Red Hat:certificate_system:7.3
 before 0:5.5.23-0jpp_4rh.16
0:5.5.23-0jpp_4rh.16
tomcat5-jasper
Red Hat:certificate_system:7.3
 before 0:5.5.23-0jpp_4rh.16
0:5.5.23-0jpp_4rh.16
tomcat5-jsp-2.0-api
Red Hat:certificate_system:7.3
 before 0:5.5.23-0jpp_4rh.16
0:5.5.23-0jpp_4rh.16
tomcat5-server-lib
Red Hat:certificate_system:7.3
 before 0:5.5.23-0jpp_4rh.16
0:5.5.23-0jpp_4rh.16
tomcat5-servlet-2.4-api
Red Hat:certificate_system:7.3
 before 0:5.5.23-0jpp_4rh.16
0:5.5.23-0jpp_4rh.16
xerces-j2
Red Hat:certificate_system:7.3
 before 0:2.7.1-1jpp_1rh
0:2.7.1-1jpp_1rh
xml-commons
Red Hat:certificate_system:7.3
 before 0:1.3.02-2jpp_1rh
0:1.3.02-2jpp_1rh
xml-commons-apis
Red Hat:certificate_system:7.3
 before 0:1.3.02-2jpp_1rh
0:1.3.02-2jpp_1rh
apache2
openSUSE:Tumbleweed
 before 2.4.49-1.1
2.4.49-1.1

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02affected, aliases, facts, references, titleGitHub Advisories, OSV
2026-11-02createdCVE List, NVD

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 113 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open